[meteorite-list] OT: PayPal spoof warning

From: Charles R. Viau <cviau_at_meteoritecentral.com>
Date: Thu Apr 22 10:16:31 2004
Message-ID: <000d01c35f0e$a07b4580$1800a8c0_at_chupa>

The thing to remember about messages from PayPal, is that they rarely
ever send you unsolicited mail, and if they do, there is never a link in
the message that invokes a login to the site. If you do ever get a
message from them requesting information from you, just examine the mail
header (in Outlook, just right-click on the message in the inbox folder
and select "options"). Look at the "received:" line information and you
can see if the sender was original, or faked. The real Domain name and
the IP address of the actual sender will show up linked to any phony or
forged sender address. Also, never go into PayPal in your browser,
unless the URL starts with "https//" (not http//) like in:"
https://www.paypal.com..." It is almost impossible for hackers like
this to be able to use SSL to authenticate their bogus web sites. You
can prove this by first making sure you disable Active-x and Java
scripting in your browser, then attempt to invoke the bogus PayPal link.
The address box in the top of the browser will show "http://", and the
rest of the URL may start with something like "playpal.com" followed by
a bunch of directory entries that wind up pointing you to a bogus ASP
script that will suck up your password. (you have disabled scripting, so
the page will not show up the way it normally would).

CharlyV


-----Original Message-----
From: meteorite-list-admin_at_meteoritecentral.com
[mailto:meteorite-list-admin_at_meteoritecentral.com] On Behalf Of Michael
Farmer
Sent: Sunday, August 10, 2003 2:07 AM
To: Matson, Robert; meteorite-list_at_meteoritecentral.com
Subject: Re: [meteorite-list] OT: PayPal spoof warning

This has been going around for some time. I never let money pile up in
my
account. I had my card number stolen in Brazil, and they got me for $800
in
just a few minutes. It was refunded, but remember, PAYPAL is a cash
account,
debit, so money can be stolen from it, that is what these scumbags are
doing.
Mike Farmer
----- Original Message -----
From: "Matson, Robert" <ROBERT.D.MATSON_at_saic.com>
To: <meteorite-list_at_meteoritecentral.com>
Sent: Saturday, August 09, 2003 10:58 PM
Subject: [meteorite-list] OT: PayPal spoof warning


Hi All,

I probably don't need to warn most of you, but just to cover the
bases I thought I would post a message here since many of you
probably use PayPal. Some "enterprising" individual(s) is/are
attempting to trick PayPal customers into revealing detailed
account information. Usually these "spoofs" are pretty
unsophisticated, but the one I got today looked official enough
that someone might get fooled. It starts off with:

"This e-mail is the notification of recent innovations taken by
PayPal to detect inactive customers and non-functioning mailboxes.

"The inactive customers are subject to restriction and removal in
the next 3 months.

"Please confirm your email address and credit card information by
logging in to your PayPal account using the form below:"

- - - -

A form appears with boxes for email address, password, name,
credit card #, expiration date, and ATM PIN (for bank verification).
It finishes with the somewhat official-looking paragraphs:

"This PayPal notification was sent to your mailbox. Your PayPal account
is set up to receive the PayPal Periodical newsletter and product
updates
when you create your account. To modify your notification preferences
and
unsubscribe, go to https://www.paypal.com/PREFS-NOTI and log in to your
account. Changes to your preferences may take several days to be
reflected in our mailings. Replies to this email will not be processed.

CopyrightC 2003 PayPal Inc. All rights reserved. Designated trademarks
and brands are the property of their respective owners."

- - -

If they hadn't been so stupid to ask for my ATM PIN, I might have
been a little less suspicious. Just wonder if this should this be
reported somewhere that handles fraud cases? --Rob

______________________________________________
Meteorite-list mailing list
Meteorite-list_at_meteoritecentral.com
http://www.pairlist.net/mailman/listinfo/meteorite-list




______________________________________________
Meteorite-list mailing list
Meteorite-list_at_meteoritecentral.com
http://www.pairlist.net/mailman/listinfo/meteorite-list
Received on Sun 10 Aug 2003 03:11:26 AM PDT